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Background 


* 


Small Spacecraft Investigation 

- Modular CommonBus Spacecraft 

Hover Test Vehicle (HTV) Development 

Next Step - Lunar Atmosphere and Dust 
Environment Experiment (LADEE) 

- Joint ARC/GSFC Mission 

- Lunar Orbiter, Launch 2012 
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Flight Software Infrastructure Development 


• Model Based Approach for Application Unique 
Software 

• Latest Developments 

- Mathworks Simulink/RTW Embedded Coder 

- Integration of GSFC ITOS GDS Tool 

- Integration of GSFC Core Flight Executive (cFE) 

- Demonstrated on HTV 


Hover Test 
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Flight Software Development Process Overview 


FSW Process Overview 



* 


• Model Based Development Approach 

- Develop Models of FSW, Vehicle, and Environment in Simulink 

- Automatically generate Software using RTW/EC. 

- Integrate with hand-written and heritage software. 

- Iterate while increasing fidelity of tests - Workstation Sim (WSIM), Processor-1 n-The- 
Loop (PIL), Hardware-in-the-Loop (HIL) 
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Automatic Code Generation 





Con3tant2 
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vzl 


/* Gain: ' <S16>/Galnl * Incorporates: 

* Constant: ‘ <S16>/Constant * 

* Constant: 1 <S16>/Constant3 ‘ 

* Gain : * <S16>/Galn * 

* Sum: ' <S16>/Sum * 

* Sum: ‘ <S16>/Sum3 ' 

*/ 

rtb_Gainl_o = (5.0 - (10.0 - rtb_h_cg) * 0.4) * -1.0; 
rtb_Switch_g_idx = 0.1 - rtb_Gainl_o; 
rtb_Switch_g_idx_0 * rtb_Gainl_o - 1.0; 


•Simulink supports two way trace-ability between 

models and generated code 

•Code Easy to read, well commented 
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* 


Simulink Model Overview 




Simulink HTV Architecture 



telemetry 


spacecraft_bus_in 



thruster_cmds 





csci fsw a 


fsw_fhw_cmds 

bus_fsw 

fsw_telem 

bus_telem 

fwh_bus 

bus_fhw_cmds 

csci_bus_ 

_a 

bus_from_hw 

fhw_cmds 

spacecraft_forces 

busjelem 

spacecraft_properties 

env_metrics 

downlink 

radiated_uplink 




csci_env_a 


uplink 

radiated_downlink 


telemetry 

gds_commands 



csci_gnd_sta_a 


telemetry 

commands 



Flight Software 


Flight Bus (Data) 


Flight Hardware 


Environmental Link 


Ground Station 


Ground Data Station 


c> FSW Auto-Coded 
and integrated with 
CFE 


csci_gds_a 
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Simulink FSW Model 
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Simulink Flight Hardware Model 
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Simulink Environment Model 


* 










cFE Simulink Integration 


cFE - Core Flight Executive 


• Goddard Space Flight Center Developed 

• Derived from Legacy Missions 

• Flexible infrastructure for Space Flight 
Software 

• Components: 

- Executive Services 

- Event Services 
-Time Services 
-Table Services 

- Software Bus Services 
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cFE Simulink Development Goals 


* 


• Utilize cFE with no changes 

• Automate process during Code 
Generation. 

• Subsystem Blocks generate to cFE 
Applications that run at desired rates 

• Simulink Apps/Blocks Communicate via 
cFE Software Bus 
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Layered Architecture Approach 


* 


Payload 

Manager 

GN&C 

Thermal 

State Propulsion 

Estimation Management 

Telemetry 

Power 

Vehicle Health 
and Monitoring 

Command 

Processing 


Simulink Generated Mission 
Unique Application Layer 










Cmd 

Telem 

HW 

File 

Memory 


House 

Master 

Ingest 

Output 

I/O 

Mgmt 

Mgmt 


Keeping 

Timer 


} Generic Services Layer 
(GSFC cFS) & Hand Code 


Table 

Management 

Software Bus 

Exec & Task 
Services 

Time 

Management 


Event 

Handler 


System Support Layer 
(GSFC cFE) 







VxWorks OS Bootstrap 

Memory R/W 

Timer 

PCI 

MOAB Driver 

Loader 

Driver 

Driver 

Driver 

RS422, I/O, COMM, HK 


OS Services Layer 
(VxWorks OS, 

GSFC OS Abstraction Layer) 


Processor 

Non-Volatile 

Volatile T . 

Timers 

Comm. 

BRE 440 

Memory 

Memory 



cPCI RS-422 Digital I/O 


■N 

Physical 

* (Hardware) Layer 

J 


Analog Acquisition 




cFE Simulink Key Ideas 


* 


• Modular Tasks (vs. Monolythic) 

- Pros: 

• More Flexible 

• Simplifies Task Replacement 

• Easier Debugging - can look at messages between tasks 

- Cons: 

• Harder to implement 

• More overhead due to more tasks and messages 

• Mathworks Template (TLC) File 

- Executed during Code Generation Process 

- Allows customization of created code 

- Leveraged to autocode cFE Apps from Simulink 
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cFE Simulink Implementation 


* 


• Simulink Bus translates to cFE Message 

• RTW/EC generates Task Description 

• Master Timer Generates “Tick” to 
Schedule Apps and generate Output 
Messages 

• Receive Structure Msgs update local App 
Input Values 

• Apps also Respond to Other Command 
and Housekeeping Messages 
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cFE Simulink Autocode Process 


RTW/EC 


Compile & Link 


Sequencer 


VHM 


State Est. 


Thermal 


HTV Bus 
Description 


Sequencers + IF.h 


VHM.C+ IF.h 


State Est.c + IF.h 


Thermal.c + IF.h 


Payload 

> 

Payloads + IF.h 


Prop Pyro 

> 

PropPyro.c + IF.h 

Power 

> 

Powers + IF.h 

GN&C 

> 

GNC.C + IF.h 

Telemetry 

> 

Telemetry.c + IF.h 






CFE inteface.c 


ITOS DBX 
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Simulink Bus becomes cFE Message 


BusCreator 

This block creates a bus signal from its inputs. 
Parameters 

f Inherit bus signal names from input ports 
Number of inputs: [i 
Signals in bus 
► csc_sensor_out 
P uplink 


Rename selected signal: 

& Specify properties via bus object 
Bus object: csci_fhw_bus_from_hw 
5? Output as nonvirtual bus 


( Refresh ) 


y 1 = ± + 


= csc_state_est_input 
= csc_state_est_msg 
= csc_thrml_input 
5csc_thrml_msg 
= csc_ttc_input 
= csc_ttc_msg 
= csc_ttc_telem_msg 
= csc_vhm_input 
= csc_vhm_msg 
= csci_fhw_bus_from_hw 
▼=csc_sensor_out(csc_sensor_out) 

► sans_msg(ans_msg) 

► =pwr_msg(pwr_msg) 

▼ slns_msg(lns_msg) 

— lns_delta_velocity_counts 

— lns_delta_angle_counts 

— Ins_status 

— lns_mode 

— Ins_data 

— lns_counts 

— Ins_checksum 

► =viz_msg(viz_msg) 

► =rdr_msg(rdr_msg) 

▼ = uplink(uplink) 

► =env^cmd_msg(env_cmd_msg) 

► =gdt_sim_params(gdt_sim_params) 
= csci_fsw 

sdownlink 


— Ins_delta_ai 

— Ins_status 

— Ins.mode 

— Ins_data 

— Ins_checksi 


Simulink.BusElement: lns_delta_velocity_counts 

Properties 

Name: lns_delta_velocity_counts 

DataType: int 16 
Data Type Assistant 

Mode: Built in C int 16 

Complexity: real 

Dimensions: 3 

SamplingMode: Sample based 

SampleTime: -1 


Revert f Help ) 


'lns_msg', ... 

ii 

sprintf("), { ... 

{'lns_delta_velocity_counts', 3, 'inti 6', -1, 'real', 'Sample'}; ... 
{'lns_delta_angle_counts', 3, 'inti 6', -1, 'real', 'Sample'}; ... 
{'Ins_status', 1, 'inti 6', -1, 'real', 'Sample'}; ... 

{'Insjnode', 1, 'inti 6', -1, 'real', 'Sample'}; ... 

{'Ins_data', 1, 'int16', -1, 'real', 'Sample'}; ... 

{'lns_counts', 3, 'inti 6', -1, 'real', 'Sample'}; ... 
{'Ins_checksum', 1, 'int16', -1, 'real', 'Sample'}; ... 

}... 
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cFE Simulink Message Flow 


10 Hz 
Tick 


100 Hz Tick 100 Hz 100 Hz 

Tick Tick 



> 

Messages 
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cFE Simulink App Loop 


* 


Struct Appjnputs In 
Struct App_Outputs Out 
App_lnit() { 

lnitialize_App_lnputs() 

Subscribe_SB_Msgs(Tick, AppMsgs, . . . ) 

Simulink_lnit(ln, Out) 

} 

App_Main(){ 

App_lnit() 
while(l) { 

sb_receive_msg(msg, timeout) 
if (msg == tick) { 

Simulink_Step(dt, In, Out) 
sb_send_msg(Out) /* app update 7 

} else { 

If (msg == app_update) /* Process other App Msgs 7 
App_Update_lnputs(msg, Out) 
else Process_Msg(msg) /* HK, Cmds, etc... 7 

} 

} 


23 


New Efforts 


• 3D0F Simulator 

• Command Queueing 

• Parameter Tables 

• Command & Telemetry Dictionary - XTCE 

• Snapshot/Snapshot Recall 

• Latency Reduction 

- Output Message triggers “Step” of Next Module 

- Retains Modularity 
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Summary 


* 


• NASA Ames developing infrastructure for 
rapid flight software development 

• Model based process leverages 
Mathworks Simulink, RTW-EC 

• Developed modular approach to integrate 
auto-generated code with GSFC’s cFE. 

• Successfully demonstrated on HTV 

• Being Utilized on NASA’s LADEE mission 



* 


Backup 
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cFE IMU App Loop 


* 


IMU_Main(){ 
while(l) { 

struct imu_input_str imu_in 

read_msg_que(imu_in, timeout) /* VxWorks Msg Que 7 
sb_send_msg(imu_msg) 

Send_tick() 

} 

} 


Cnt = 0; 

Send_tick() { 

sb_send_msg(400HZ_Tick) /* Do we need 400HZ Tick or key off of IMU Data? 7 
if ((Cnt % 2) == 0) sb_send_msg(200HZ_Tick) 
if ((Cnt % 4) == 0) sb_send_msg(100HZ_Tick) 
if ((Cnt % 40) == 0) sb_send_msg(10HZ_Tick) 
if ((Cnt % 400) == 0) sb_send_msg(1 HZ_Tick) 


Cnt++; 

} 

/* Note: Other Apps same as IMU without the Send_tick() 7 
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Workstation Simulation 



Local Workstation 

•Simulink/SystemBuild Only (No Autocode) 

•Early in development process 
•Algorithm Development 
•Requirements Analysis 
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Processor-in-the-Loop Simulation 


* 



•Models autocoded and running on RT processors 
•Inexpensive “flight-like” processor 

•Tests autocoding process & integration with C&DH software 
•Integration with Telemetry Software allows early 
development/testing of downlink 
•Can be used for initial code size and resource utilization analysis 




Hardware-in-the-Loop Simulation 


* 



•Flight code runs on Flight Avionics EDU 
•Provides testing of FSW with Avionics I/O 
•Definitive answers on resource utilization 
•Highest fidelity simulations for verification/validation 
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Motivation for Moving to Simulink 


* 


• Industry appears to be moving that direction. 

• Mathworks Extensive support network. 

• Mathworks tools for Requirements management, 
Documentation, and V&V. 

• Bus concept makes model management easier. 

• Monolithic SystemBuild models not conducive to 
Reuse and V&V. 
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